understand-knowledge
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
merge-knowledge-graph.pyscript executesgit rev-parse HEADusingsubprocess.runto include version information in the output graph. This command is static and safe as it does not include unsanitized user inputs.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external markdown content via subagents.\n - Ingestion points: The
parse-knowledge-base.pyscript (line 330) reads content from any.mdfile in the provided target directory.\n - Boundary markers: No explicit delimiters or instructions are provided in the
SKILL.mdPhase 3 instructions to isolate article content when passed to thearticle-analyzersubagents.\n - Capability inventory: The skill environment permits file system operations and execution of local Python scripts for data processing.\n
- Sanitization: The scripts use standard regex and JSON parsing to extract structural data but do not sanitize the text content passed to the LLM-based subagents.
Audit Metadata